Your first tenant
Once your MSP account is approved and GDAP is set up, here's the 10-minute walkthrough to onboard your first customer and prove the platform end to end.
1. Send the GDAP invite
GDAP setup covers this. Pick the full 8-group role template for your first tenant so every module works out of the box; trim back later if the customer needs a tighter scope.
2. First sync
As soon as the customer Global Admin accepts, the tenant appears in the portal. The first sync is automatic and runs through these surfaces in parallel:
- Licence inventory (who's on what SKU)
- User list + sign-in activity (via
AuditLog.Read.All) - Conditional Access policies snapshot
- Microsoft Secure Score
- Defender incidents + risky sign-ins
Watch the tenant detail page — counters go live as each surface reports in.
3. Run a baseline compliance scan
Open the tenant's Compliance tab, clickScan Essential Eight. First scan takes 15–30 seconds. You'll get:
- Maturity Level score (0–3) per strategy
- Specific findings the customer can address
- Remediation steps with exact Graph / admin-centre paths
- An evidence blob kept for the audit trail
4. Apply a standard
Manage365 ships ~20 built-in standards. For a quick win, applyBlock legacy authentication and Require MFA for admins. Open Standards, pick the standard, select the tenant, click Apply. Target: under 60 seconds, visible via a live WebSocket progress feed.
5. Check DNS health
Every tenant you onboard should pass SPF / DMARC / DKIM / DNSSEC at minimum. Open the tenant's DNS healthtab — the platform checks the tenant's default domain against the M365 default DKIM selectors and gives you copy-paste DNS records for any gaps.
6. Wire the PSA integration (optional but recommended)
In Settings → Integrations connect HaloPSA (or ConnectWise Manage). After that, alerts raised against this tenant can auto-open tickets, and Manage365 actions can log time entries for billing. See HaloPSA integration.
7. Wallboard the portfolio
Open Wallboard on a spare screen in your NOC. Pick the NOC overview template — it auto-refreshes every 30 seconds and shows portfolio health, active incidents, open critical alerts, compliance score average. One tenant in, you already have a working wallboard.
What to try next
- Add a second tenant and watch the wallboard update.
- Create a change request from the client portal.
- Set up the weekly digest email.
- Run the auditor evidence bundle.